Buggy code:
int systemId = 0 ; int networkId = 0 ; int roamingIndicator = - 1 ; int systemIsInPrl = 0 ; int defaultRoamingIndicator = 0 ; int reasonForDenial = 0 ; if ( ( states . length ) == 14 ) { try { if ( ( states [ 0 ] ) != null ) { registrationState = Integer . parseInt ( states [ 0 ] ) ; } if ( ( states [ 3 ] ) != null ) { radioTechnology = Integer . parseInt ( states [ 3 ] ) ; } if ( ( states [ 4 ] ) != null ) { if ( mIsSamsungCdma ) baseStationId = Integer . parseInt ( states [ 4 ] , 16 ) ; else baseStationId = Integer . parseInt ( states [ 4 ] ) ; } if ( ( states [ 5 ] ) != null ) { if ( mIsSamsungCdma ) baseStationLatitude = Integer . parseInt ( states [ 5 ] , 16 ) ; else baseStationLatitude = Integer . parseInt ( states [ 5 ] ) ; } if ( ( states [ 6 ] ) != null ) { if ( mIsSamsungCdma ) baseStationLongitude = Integer . parseInt ( states [ 6 ] , 16 ) ; else baseStationLongitude = Integer . parseInt ( states [ 6 ] ) ; } if ( ( baseStationLatitude == 0 ) && ( baseStationLongitude == 0 ) ) { baseStationLatitude = CdmaCellLocation . INVALID_LAT_LONG ; baseStationLongitude = CdmaCellLocation . INVALID_LAT_LONG ; } if ( ( states [ 7 ] ) != null ) { cssIndicator = Integer . parseInt ( states [ 7 ] ) ; } if ( ( states [ 8 ] ) != null ) { systemId = Integer . parseInt ( states [ 8 ] ) ; } if ( ( states [ 9 ] ) != null ) { networkId = Integer . parseInt ( states [ 9 ] ) ; } if ( ( states [ 10 ] ) != null ) { roamingIndicator = Integer . parseInt ( states [ 10 ] ) ; } if ( ( states [ 11 ] ) != null ) { systemIsInPrl = Integer . parseInt ( states [ 11 ] ) ; } if ( ( states [ 12 ] ) != null ) { defaultRoamingIndicator = Integer . parseInt ( states [ 12 ] ) ; } if ( ( states [ 13 ] ) != null ) { reasonForDenial = Integer . parseInt ( states [ 13 ] ) ; } } catch ( NumberFormatException ex ) { Log . w ( CdmaServiceStateTracker . LOG_TAG , ( "error<seq2seq4repair_space>parsing<seq2seq4repair_space>RegistrationState:<seq2seq4repair_space>" + ex ) ) ; } } else { throw new RuntimeException ( ( ( "Warning!<seq2seq4repair_space>Wrong<seq2seq4repair_space>number<seq2seq4repair_space>of<seq2seq4repair_space>parameters<seq2seq4repair_space>returned<seq2seq4repair_space>from<seq2seq4repair_space>" + "RIL_REQUEST_REGISTRATION_STATE:<seq2seq4repair_space>expected<seq2seq4repair_space>14<seq2seq4repair_space>got<seq2seq4repair_space>" ) + ( states . length ) ) ) ; } mRegistrationState = registrationState ; mCdmaRoaming = ( regCodeIsRoaming ( registrationState ) ) && ( ! ( isRoamIndForHomeSystem ( states [ 10 ] ) ) ) ; newSS . setState ( regCodeToServiceState ( registrationState ) ) ; this . newCdmaDataConnectionState = radioTechnologyToDataServiceState ( radioTechnology ) ; newSS . setRadioTechnology ( radioTechnology ) ; newNetworkType = radioTechnology ; newSS . setCssIndicator ( cssIndicator ) ; newSS . setSystemAndNetworkId ( systemId , networkId ) ; mRoamingIndicator = roamingIndicator ; mIsInPrl = ( systemIsInPrl == 0 ) ? false : true ; mDefaultRoamingIndicator = defaultRoamingIndicator ; newCellLoc . setCellLocationData ( baseStationId , baseStationLatitude , baseStationLongitude , systemId , networkId ) ; if ( reasonForDenial == 0 ) { mRegistrationDeniedReason = ServiceStateTracker . REGISTRATION_DENIED_GEN ; } else if ( reasonForDenial == 1 ) { mRegistrationDeniedReason = ServiceStateTracker . REGISTRATION_DENIED_AUTH ; } else { mRegistrationDeniedReason = "" ; } if ( ( mRegistrationState ) == 3 ) { if ( DBG ) log ( ( "Registration<seq2seq4repair_space>denied,<seq2seq4repair_space>" + ( mRegistrationDeniedReason ) ) ) ; } break ; case EVENT_POLL_STATE_OPERATOR_CDMA : String [ ] opNames = ( ( String [ ] ) ( ar . result ) ) ; if ( ( opNames != null ) && ( ( opNames . length ) >= 3 ) ) { <START_BUG> if ( ( ( opNames [ 2 ] ) != null ) && ( ( opNames [ 2 ] ) <= "460003" ) ) <END_BUG> opNames [ 2 ] = "46003" ; if ( cm . getRadioState ( ) . isNVReady ( ) ) { newSS . setOperatorName ( null , opNames [ 1 ] , opNames [ 2 ] ) ; } else { newSS . setOperatorName ( opNames [ 0 ] , opNames [ 1 ] , opNames [ 2 ] ) ; } } else { Log . w ( CdmaServiceStateTracker . LOG_TAG , "error<seq2seq4repair_space>parsing<seq2seq4repair_space>opNames" ) ; } break ; default : Log . e ( CdmaServiceStateTracker . LOG_TAG , ( "RIL<seq2seq4repair_space>response<seq2seq4repair_space>handle<seq2seq4repair_space>in<seq2seq4repair_space>wrong<seq2seq4repair_space>phone!" + "<seq2seq4repair_space>Expected<seq2seq4repair_space>CDMA<seq2seq4repair_space>RIL<seq2seq4repair_space>request<seq2seq4repair_space>and<seq2seq4repair_space>get<seq2seq4repair_space>GSM<seq2seq4repair_space>RIL<seq2seq4repair_space>request." ) ) ; break ; } } catch ( RuntimeException ex ) { Log . e ( CdmaServiceStateTracker . LOG_TAG , ( "Exception<seq2seq4repair_space>while<seq2seq4repair_space>polling<seq2seq4repair_space>service<seq2seq4repair_space>state.<seq2seq4repair_space>" + "Probably<seq2seq4repair_space>malformed<seq2seq4repair_space>RIL<seq2seq4repair_space>response." ) , ex ) ; } ( pollingContext [ 0 ] ) -- ; if ( ( pollingContext [ 0 ] ) == 0 ) { boolean namMatch = false ; if ( ( ! ( isSidsAllZeros ( ) ) ) && ( isHomeSid ( newSS . getSystemId ( ) ) ) ) { namMatch = true ; } if ( isSubscriptionFromRuim ) { newSS . setRoaming ( isRoamingBetweenOperators ( mCdmaRoaming , newSS ) ) ; } else { newSS . setRoaming ( mCdmaRoaming ) ; } newSS . setCdmaDefaultRoamingIndicator ( mDefaultRoamingIndicator ) ; newSS . setCdmaRoamingIndicator ( mRoamingIndicator ) ; boolean isPrlLoaded = true ; if ( TextUtils . isEmpty ( mPrlVersion ) ) { isPrlLoaded = false ; } if ( ! isPrlLoaded ) { newSS . setCdmaRoamingIndicator ( ROAMING_INDICATOR_FLASH ) ; } else if ( ! ( isSidsAllZeros ( ) ) ) { if ( ( ! namMatch ) && ( ! ( mIsInPrl ) ) ) { newSS . setCdmaRoamingIndicator ( mDefaultRoamingIndicator ) ; }

Fix:
if ( opNames [ 2 ] . equals ( "460003" ) )